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Phrack Index 


This issue of Phrack Inc. is rather lengthy file-wise 
compared to issue one. Phrack Inc. can be found on the 
following boards regularly: 


Broadway Show 718-615-0580 
Newsweek Elite 617-341-2535 
Kleptic Palace AE/Catfur 314-527-5551 
Metal Shop Private Request only 
Metal Shop AE Request only 


...as well as many other BBS’s and AE’s around the country. 


Be on the lookout for issue three. If you wish to submit an 
article, get in touch with any member of Metal Shop Private 
and have a message transmitted to me. Later on. 

TARAN KING 


This issue of Phrack Inc. includes the following philes: 


Phrack Inc. Index - Taran King 

Prevention of the Billing Office Blues Forest Ranger 
Homemade Guns —- Man-Tooth 

Blowguns - The Pyro 

Tac Dialups taken from Arpanet - Phantom Phreak 


Universal Informational Services via ISDN - Taran King 
MCI Overview - Knight Lightning 

Hacking RSTS - Data Line 

Phreak World News —- Knight Lightning 


OMNIA AWNE 
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Prevention of the Billing Office Blues 
Editorial: Forest Ranger 


In an earlier article there were ways explained on bullshiting the 
Billing Office at Bell. By doing so one could disconnect a persons line, 
add call forwarding, call waiting, threeway calling, speed calling, or other 
options that might be available through Bell. Well, this can be very disturbing 
and cause many problems so lets see how this can be prevented. First off, it 
would be a very good idea to call the Billing office for your exchange and ask 
that all inquires made on the your line be verified with you. Is what happens 
now is that Bell marks down in your file that if you decide that you would like 
a certain Bell option added to your line; they will call and check it out with 
you or the person that pays the phone bill. So if someone tries to add 
something onto your line you will be notified before hand. This has two 
advantages, one you will prevent any occurences on your line, two you will know 
that someone is attempting to mess around with your phone line. But, in the end 
you will come out on top because you took the time to listen. And as Smokey the 
Bear says, "Don’t Shit in the woods I LIVE HERE!". 
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TCT CTC --] Man-Tooth [-- Cee 
@eee presents... @eee 
COC@isis Heda ihi siei ees bese CeECe 
@eee -—- HOMEMADE GUNS -- CECICEC 
COCO ees ithet See he eS ea Se ECC 
@aee from @eee 
@@@@ "The Poor Man’s James Bond" @@@@ 
@eee by Kurt Saxon @eee 


PIPE OR "ZIP" GUNS 


Commonly known as "zip" guns, guns made from pipe have 
been used for years by juvenile punks. Today’s Militants 
make them just for the hell of it or to shoot once in an 
assassination or riot and throw away if there is any danger 
of apprehension. 

They can be used many times but with some, a length of 
dowel is needed to force out the spent shell. 


There are many variations but the illustration shows the 
basic design. 


First, a wooden stock is made and a groove is cut for 
the barrel to rest in. The barrel is then taped securely to 
the stock with a good, strong tape. 


The trigger is made from galvanized tin. A slot is 
punched in the trigger flap to hold a roofing, which is 
wired or soldered onto the flap. The trigger is bent and 
nailed to the stock on both sides. 


The pipe is a short length of one-quarter inch steel gas 
or water pipe with a bore that fits in a cartridge, yet 
keeps the cartridge rim from passing through the pipe. 

The cartridge is put in the pipe and the cap, with a 
hole bored through it, is screwed on. Then the trigger is 
slowly released to let the nail pass through the hole and 
rest on the primer. 


[To fire, the trigger is pulled back with the left hand 
and held back with the thumb of the right hand. The gun is 
then aimed and the thumb releases the trigger and the thing 


actually fires. 


Pipes of different lengths and diameters are found in 
any hardware store. All caliber bullets, from the .22 to 
the .45 are used in such guns. 


Some zip guns are made from two or thr pipes nested 
within each other. For instance, a .22 shell will fit 
snugly into a length of a car’s copper gas line. 
Unfortunatey, the copper is too weak to withstand the 
pressure of the firing. So the length of gas line is spread 
with glue and pushed into a wider length of pipe. This is 
spread with glue and pushed into a length of steel pipe with 
threads and a cap. 
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Using this method, you can accomodate any cartridge, 
even a rifle shell. The first size of pipe for a rifle 
shell accomodates the bullet. The second accomodates its 
wider powder chamber. 


A 12-gauge shotgun can be made from a 3/4 inch steel 
pipe. If you want to comply with the gun laws, the barrel 
should be at least eighteen inches long. 


Its firing mechanism is the same as that for the pistol. 
It naturally has a longer stock and its handle is lengthened 
into a rifle butt. Also, a small nail is driven half way 
into each side of the stock about four inches in the front of 
the trigger. The rubber band is put over one nail and 
brought around the trigger and snagged over the other nail. 


In case you actually make a zip gun, you should test it 
before firing it by hand. This is done by first tying the 
gun to a tree or post, pointed to where it will do no 
damage. Then a string is tied to the trigger and you go off 
several yards. The string is then pulled back and let go. 
If the barrel does not blow up, the gun is safe to fire by 
hand. 


You should not attempt to register such a gun. 


Pipe Cap 
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How To Make Blow Darts 


! ! 
! | 
| Written by The Pyro | 
! ! 
! ! 


Blow darts are easy to make and all the materials can be found in your own 
home. These darts can travel a long distance with good penetration if 
constructed correctly. 


Materials needed: 


A small piece of wood 
A sewing machine needle 
A spool of thread 

A couple nails 

Hammer 

Glue 

Scissors 


Hammer the two nails about two inches apart on the board. Wrap the thread 
tightly around the two nails. The number of times the thread is wrapped around 
the nails will determine the amount of weight and stability the dart has. Once 
you have decided you have wrapped enough thread, cut it close to the nail at 
around a half inch. Take this small tuft of thread and put a dab of glue on the 
folded end. The kind of glue you use is very important. I suggest that you use 
a tacky kind of glue (nothing runny, like Elmer’s glue). Attach this to the 
needle and hold until it is dry. 

Another kind of dart can be made with Q-tips. This kind of dart doesn’t work 
as well as the first one, but it is sometimes easier to make. first you have to 
get the kind of Q-tips that have a plastic stem. Cut the Q-tip close to one 
end. Insert the sewing needle into the Q-tip and secure it by melting the 
plastic slightly with a lighter. This kind of dart doesn’t last long because 
the cotton come off easily. 


Blow Guns: 


Ordinary straws make an excellent blow gun with this kind of dart. Another 
kind can be made with a cheap pen by taking apart the pen and using the shell. 
Any long, cylindrical, object with the diameter of a straw will work very well. 


T “hoes, At 1 a alm cere 
618-667-3825 


7pm. to 7am. 


(> 


Received: (from UNKNOWN@HACKERVILLE for HATCHET@VALHALLA via XTC) 


(UNKNOWN-0481; 185 LINES); Tun, O7 Oct 88 21:12:54 CDT 
Date: Tun, O7 Oct 88 21:12 CDT 
Los HATCHET 
From: UNKNOWN@HACKERVILLE 


Comment: converted from FBICIADATA format at 666 
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Updated from November 26, 1985 
Tac Dialups taken from Arpanet 
by Phantom Phreaker 


TAC DIALUPS SORTED BY LOCATION 26-NOV-85 


State/Country 300 Baud 1200 Baud 1200 Type 
ALABAMA 
Anniston Army Depot [M] 
(ANNIS-MIL-TAC) (205) 235-6285 (R4) (205) 235-7650 B/V 
(205) 237-5731 (R8) (205) 237-5731 (R8) B/V 
(205) 237-5770 (R8) (205) 237-5779 (R8) B/V 
(205) 237-5805 (R8) (205) 237-5805 (R8) B/V 
*Please note: When accessing the Anniston TAC you must first enter a 


<RETURN>, then enter DDN <RETURN>. After you receive CLASS DDN START, 
proceed as normal. 


Gunter AFS [M] 
(GUNTER-TAC) (205) 279-3576 
(205) 279-4682 


Redstone Arsenal [M] 


(MICOM-TAC) [none known] 
ARIZONA 

Ft. Huachuca [M] 

(HUAC-MIL-TAC) [none known] 

Yuma [M] 

(YUMA-TAC) (602) 328-2186 (602) 328-2186 B/V 
(602) 328-2187 (602) 328-2187 B/V 
(602) 328-2188 (602) 328-2188 B/V 


CALIFORNIA (NORTHERN) 
Alameda [M] 
(ALAMEDA-MIL-TAC) [none known] 


Menlo Park [M] 
(SRI-MIL-TAC) (415) 327-5440 (R3) (415) 327-5440 (R3) B 


(USGS3-TAC) [M] [no dialups] 


Moffett Field [M] 
(AMES-TAC) [no dialups; contact NSC for access] 
William Jones - (415) 694-6482 
(FTS) 494-6482 
(AV) 359-6482 


Monterey [M] 


(NPS-TAC) [none known] 
Sacsamento [M] 

(MCCLELLAN1—-MIL-TAC) [none known] 
(MCCLELLAN2-MIL-TAC) [none known] 


(SU-TAC) (415) 327-5220 


CALIFORNIA (SOUTHERN) 
China Lake [M] 
(NWC-TAC) [none known] 
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Edwards AFB [M] 
(EDWARD-MIL-TAC) [none known] 


El Segundo [M] 
(AFSC-SD-TAC) (213) 643-9204 (213) 643-9204 B/V 


Los Angeles [A] 
(USC-TAC) (213) 749-5436 


Los Angeles [A] 
(USC-ARPA-TAC) [none known] 


San Diego [M 


(ACCAT-TAC) (619) 225-1641 (R4) (619) 225-6903 V 
(619) 225-6946 (R3) 
(619) 223-2148 V 
(619) 226-7884 (R2) 
Santa Monica 
(RAND-ARPA-TAC) [A] 
(213) 393-9230 
(213) 393-9237 
(213) 393-9238 
(213) 393-9239 
(RAND2-MIL-TAC) [M] [none known] 
COLORADO 
Denver Fed Ctr [M] 
(USGS2-TAC) (303) 232-0206 (303) 232-0206 B/V 
Lowry Air Force Base [M] 
(LOWRY-MIL-TAC) [none known] 
Die: 
Washington 
[Andrews AFB] [M] 
(AFSC-HQ-TAC) (301) 967-7930 (R16) (301) 967-7930 (R16) B 
(301) 736-2990 (R4) (301) 736-2990 (R4) B 
(301) 736-2998 (R2) (301) 736-2998 (R2) B 
(PENTAGON-TAC) (202) 553-0229 (R14) (202) 553-0229 (R14) B 
FLORIDA 
Eglin AFB [M] 
(AFSC-AD-TAC) (904) 882-8202 (904) 882-8202 B/V 
(904) 882-8201 (904) 882-8201 V 
acDill AFB [M] 
(MACDILL—MIL-TAC) none known 
Naval Air Station - Jacksonville [M] 
(JAX1—-MIL-TAC) none known 
Naval Air Station - Orlando [M 
(ORLANDO-MIL-TAC) none known 
GEORGIA 
Robins AFB [M] 
(ROBINS-TAC) (912) 926-2725 (912) 926-2725 B/V 
(912) 926-2726 
(912) 926-3231 
(912) 926-3232 
(912) 926-2204 (912) 926-2204 B/V 
HAWAII 


Camp H.M. Smith [M] 
(HAWAII2-TAC) (808) 487-5545 (808) 487-5545 B 
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ILLINOIS 
Scott AFB [M] 
(SCOTT-TAC) [none known] 


(SCOTT2-MIL-TAC) [none known] 


KANSAS 

Ft. Leavenworth [M] 

(LVN-MIL-TAC) (913) 651-7041 (R8) (913) 651-7041 (R8) 
LOUISIANA 


Navy Regional Data Automation Center [M] 


(NORL-—MIL-TAC) (504) 944-7940 (504) 944-7940 
(504) 944-7948 (R2) (504) 944-7948 (R2) 
(504) 944-7951 (R5) (504) 944-7951 (R5) 
(504) 944-8702 (R8) (504) 944-8702 (R8) 
MARYLAND 
Aberdeen Proving Ground [M] 
(BRL-TAC) (301) 278-6916 (R4) (301) 278-6916 (R4) 
Bethesda [M] 
(DAVID-TAC) (202) 227-3526 (R16) (202) 227-3526 (R16) 
Patuxent River [M] 
(PAX-RV-TAC) (301) 863-4815 (301) 863-4815 
(301) 863-4816 (301) 863-4816 


(301) 863-5750 (R6) (301) 863-5750 (R6) 


Silver Spring [M] 
(WHITEOAK-MIL-TAC) (301) 572-5960 (R10) (301) 572-5960 (R10) 
(301) 572-5970 (R10) (301) 572-5970 (R10) 


MASSACHUSETTS 
Hanscom AFB [M] 
(AFGL-TAC) (617) 861-3000 (R8) (617) 861-3000 (R8) 
(617) 861-4965 (R8) (617) 861-4965 (R8) 
Cambridge 
(BBN-MIL-TAC) [M] [none known] 


(BBN-ARPA-TAC) [A] [no dialup capability] 
(CCA-ARP-TAC) [A] [none known] 


(MIT-TAC) [A] 


(617) 491-5669 (617) 258-6224 
(617) 491-5708 (617) 258-6225 
(617) 491-5734 (617) 258-6227 
(617) 491-5819 (617) 258-6248 
(617) 491-5826 
(617) 491-5841 
(617) 491-5849 
(617) 491-6769 
(617) 491-6772 
(617) 491-6937 
(617) 258-6241 
(617) 258-6242 
(617) 258-6243 
MICHIGAN 
U.S. Army Tank Automotive Command (TACOM) - Warren [M] 
(TACOM-TAC) [none known] 
MISSOURI 


St. Louis [M] 
(STLA-TAC) [none known] 


DwWWwWwWw 


a<s<ac 
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NEBRASKA 
Offutt AFB [M] 
(SAC1—-MIL-TAC) [none known] 
(SAC2—-MIL-TAC) (402) 292-4638 (R10) (402) 292-4638 (R10) B 


(SAC-ARPA-TAC) [A] 


(402) 294-2398 (402) 294-2398 B 
(402) 291-2018 (402) 291-2018 B 
(402) 292-7054 (402) 292-7054 B 
NEW JERSEY 
Dover [M] 
(ARDC-TAC) (201) 724-6731 (201) 724-6731 B 
(201) 724-6732 (201) 724-6732 B 
(201) 724-6733 (201) 724-6733 B 
(201) 724-6734 (201) 724-6734 B 
Fort Monmouth [M] 
(EF TMONMOUTH1—-MIL-TAC) (201) 544-2052 (201) 544-2052 B 
(201) 544-2062 (201) 544-2062 B 
(201) 544-2072 (201) 544-2072 B 
(201) 544-2396 (201) 544-2396 B 
(201) 544-2430 (201) 544-2430 B 
(FTMONMOUTH2-MIL-TAC) (201) 544-4254 (R3) (201) 544-2430 B 
(201) 544-2636 B 
(201) 544-2638 B 
(201) 544-2777 B 
NEW MEXICO 
Albuquerque [M] 
(AFWL-TAC) [none known] 
White Sands [M] 
(WSMR-TAC) [no dialups; contact NSC for access] 
Claude (Skeet) Steffey (505) 678-1271 
(FTS) 898-1271 
(AV) 258-1271 
NEW YORK 
Griffiss AFB 
(RADC-ARPA-TAC) [A] [no dialup capability] 
(RADC-TAC) [M] 
(315) 339-4913 (R5) 
(315) 337-2004 (315) 337-2004 
(315) 337-2005 (315) 337-2005 
(315) 330-2294 (315) 330-2294 (FTS) 952 
(315) 330-3587 (315) 330-3587 (FTS) 952 


NORTH CAROLINA 

Ft. Bragg [A] 

(BRAGG-ARPA-TAC) (919) 396-1131 (R10) (919) 396-1426 (R5) 
(919) 396-1491 (R8) 
Ft. Bragg [M] 


258-4989 


(BRAGG-MIL-TAC) [none known] 
OHIO 
Wright-Patterson AFB [M] 
(WPAFB-TAC) (513) 258-4218 
(513) 258-4219 
(513) 258-4987 
(513) 258-4988 
( ) 


B/V 
B/V 


B/V 


B/V 


B/V 
B/V 
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(WPAFB2-MIL-TAC) 


OKLAHOMA 
Tinker AFB [M] 
(TINKER-MIL-TAC) 


PENNSYLVANIA 


(NCAD-MIL-TAC) 
(NCAD2-MIL-TAC) 
TEXAS 


Brooks AFB [M] 
(BROOKS-AFB-TAC) 


Richardson [A] 
(COLLINS-TAC) 


UTAH 


Dugway Proving Ground 


(DUGWAY-MIL-TAC) 


Sa 
(UTAH-TAC) 


VIRGINIA 
Alexandria [M] 
(DARCOM-TAC) 


Arlington 


(ARPA1-MIL-TAC) [M] 


(ARPA2-MIL-TAC) [M] 


(ARPA3-TAC) [A] 


Dahlgren [M] 
(NSWC-TAC) 


Langley Air Force 
(LANGLEY-MIL-TAC) 


Cc 
(DDN-PMO-MIL-TAC) 


Norfolk [M] 
(NORFOLK-MILTAC) 


(513) 
(513) 


(513) 
(513) 


[none 


[none 


[none 


[none 


(801) 


(202) 
(202) 


258-4990 
257-2172 


257-2690 
257-3625 


known] 


New Cumberland Army Depot [M] 


known] 


known] 


536-3081 


235-2131 
235-2143 
235-2178 
235-2204 
235-2251 
235-2278 


[M] 


known] 


581-3486 


274-5300 
274-5320 


( 


[none known] 


[none known] 


lt Lake City (University of Utah) [A] 


R6) 


(513) 257-2172 
(513) 257-2690 
(513) 257-3625 


(801) 


[no dialup capability] 


(703) 


Base 
[none 


[none 


663-2162 


[M] 
known 


known 


442-8020 
893-0330 


423-0241 
423-0247 
423-0346 
423-0480 
423-0486 


( 


pane 


— 


R8) 


R15) 
R10) 


R2) 
R2) 
R4) 


R2) 


(R8) 
(R8) 
(R8) 


536-3081 (R6) 


235-2131 
235-2143 
235-2178 
235-2204 
235-2251 
235-2278 


581-3486 


274-5300 


274-5320 (R6) 


(703) 663-2162 


(703) 893-0330 


(804) 423-0241 
(804) 423-0247 
(804) 423-0346 
(804) 423-0480 
(804) 423-0486 


(R8) 


ee cae 


R10) 


R2) 
R2) 
R4) 


R2) 


B/V 


WDWNWUWwWWwWwWw 


B/V 


B/V 


DWOWWwWwWw 
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(804) 423-0489 (804) 423-0489 
(804) 423-0570 (804) 423-0570 
(804) 423-0572 (R2) (804) 423-0572 (R2) 
(804) 423-0577 (R2) (804) 423-0577 (R2) 
(804) 423-0651 (804) 423-0651 
(804) 423-0654 (R3) (804) 423-0654 (R3) 
(804) 423-0841 (R2) (804) 423-0841 (R2) 
(804) 423-0845 (804) 423-0845 
(804) 423-0849 (804) 423-0849 
(804) 423-0858 (804) 423-0858 
(804) 423-0950 (804) 423-0950 
(804) 423-0952 (804) 423-0952 
(804) 423-0955 (R3) (804) 423-0955 (R3) 
(804) 423-0959 (804) 423-0959 
Reston 
(DCEC-ARPA-TAC) [A] [no dialups available] 
(DCEC-MIL-TAC) [M] 
(703) 437-2892 (R5) (703) 437-2928 
(703) 437-2925 (703) 437-2929 
(703) 437-2926 
(703) 437-2927 
WASHINGTON 
Seattle [A] 
(WASHINGTON-TAC) [no dialup capability] 
ENGLAND [M] 
(CROUGHTON-MIL-TAC) [none known] 
GERMANY [M] 
(FRANKFURT-MIL-TAC) 
(M) 2311-5641 (R8) 
(RAMSTEIN2-MIL-TAC) [none known] 
ITALY [M] 
(AGNANO-MIL-TAC) 
JAPAN [M] 
(BUCKNER-MIL-TAC) 
(ZAMA-MIL-TAC) 
KOREA [M] 
(KOREA-TAC) (M) 264-4951 (R8) 
PHILIPPINES [M] 
(CLARK-MIL-TAC) 
SPAIN [M] 
(MILNET-TJN-TAC) [none known] 
(ROTA-MIL-TAC) [none known] 
Notes: 
1. "(R10)" following phone number indicates a rotary with 10 lines. 


i) 


For alternate phone numbers, FTS=Federal Telephone System. 
or (M)=Military DoD Telephone System. 


4. [M] denotes a MILNET TAC and [A] denotes an ARPANET TAC. 


5. "1200 Type" refers to the modem compatibility for 1200 baud only: 
B/V = Bell and Vadic 
B = Bell 212A only 


WDWHWOWWDWdWddddddoddodw 
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This list is contained in the file N 
SRI-NIC. 


ETINFO: TAC-—PHON! 
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Toward Universal Information Services Via ISDN 


by Taran King 


From PROTO newsletter of AT&T Bell Laboratories 


Phase one, the Present. 


The local network of today, although still largely 
voice-oriented, is already on the path to Universal 
Information Services. Lightguide fiber is dramatically 
expanding the capacity of local networks, helping to lower 
t 

a 

i 


he costs and increase the demand for high-band width, 


nformation Age services. And public networks are 
ncreasingly digital and geared for data and special 
services. For example: 


o The AT&T Network Systems 5ESS (TM <riiiight>) switch, 
designed by Bell Laboratories, can serve as the hub of a 
local deployment of remote modules at locations up to 100 
miles from a host central office. 


o The Integrated Special Services Network (ISSN) is a channel 
network that provides special services, customer control 
options and digital private lines rearrangeable under 
software control. The ISSN incorporates digital carrier 
terminating equipment such as the D4 Channel Bank, D5 Digital 
Terminal System and Digital Access and Cross-connect System 
(DACS). 


o The New Centrex is bringing greater levels of customer 
control, improved services and a broad range of data 
capabilities to the business customer. 


Today’s public networks consist of multiple or 
overlay networks. The public switched network, or circuit 
network, mainly for voice, is the base network. Two kinds of 
overlay networks provide special services. Channel networks 
carry private lines leased by large customers and transmit 
much of today’s data and image traffic; they also handle 
traffic for network operations support. Packet networks 
carry data communications, while packet switching is used 
internally to public networks for common channel signaling to 
set up, route and take down calls, or to give customers 
information. 

"Overlay networks help telecommunications companies 
efficiently meet growing demand for digital transmission and 
special services," says Stan Johnston, Market Planning 
Manager, Network Systems Evolution, in AT&T Network Systems. 
"Their integration into a single network, however, would be 
still more effective." 


Phase two, the Integrated Services Digital Network (ISDN). 
The ISDN is a concept to which AT&T is committed - and it’s 
the foundation for Universal Information Services. The 
central idea of ISDN, as AT&T Network Systems sees it, is to 
provide an individual user a link to the local central office 
of generous band-width - a digital subscriber line that can 
carry 144,000 bits per second (sure beats 2400 baud!). The 
band-width is subdivided into two 64,000-bit channels, which 
may carry voice or data or both, and one 16,000-bit channel 
for packetized signaling information or data transport. Such 
a link provides convenient "integrated" network access by 
accommodating voice, data and signaling over a single line. 
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The ISDN will make it easier for a customer to get 
varied services from public and private networks. More 
bandwidth for big customers will be available through another 
ISDN access standard, the extended digital subscriber line, 
which provides 1.5 billion bits per second as 24 channels of 
64,000 bits each. 
In 1986, new software from Bell Labs will enable the 
5ESS switch to accommodate ISDN-sized 144,000-bit channels 
that standardize and simplify subscribers’ use of local 
networks. AT&T is committed to future products that will 
also be ISDN-compatible. Other vendors, too, some of whom 
already plan to build premises, terminal, and other 
equipment to ISDN standards, will make ISDN a cooperative 
effort. 


By providing integrated digital access to networks, 
ISDN will make important progress toward the goal of 
Universal Information Services. But overlay networks will 
continue to divvy up the transport job. And messages needing 
less than 144,000 bits per second will not fill their 
allotted bandwidth, leaving capacity underutilized. 


Phase three, Universal Information Services. 


Rooted in the fertile ground of 5ESS switches, ISDN equipment 
and technologies such as wideband packet transport, Universal 
Information Services will bear fruit during the 1990s. From 
a single kind of network will hang services as different as 
apples, oranges and pears. Just as network access was 
integrated in ISDN, transport functions will increasingly be 
integrated by powerful new network equipment evolved from 
quipment developed for the ISDN. Where customers once got 
standard-sized ISDN channels, they’1ll get big bandwidth for 
large jobs, little bandwitdh for small jobs. 
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MCI Overview 
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by 


Knight Lightning & Taran King 


@ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ Proudly Presents @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 
@ @ 


CHCH CECE CICECHCICECHCHCHCECECH CECE CICECH CCE CH CECH CECKCHCECECH CECH CACHE CHCECECACHCHCACRCHCACHCACECHCECRCACHCECACHCACECHCICECHCECRCICECHCECECHCECACACECHCAC 


MCI Communications Corporation, headquartered in Washington, D.C., provides a 
full range of domestic and international telecommunications services, including 
voice and data, telex and cable, paging and mobile telephone, and time 

sensitive message delivery. 


Since its founding in 1968, MCI has grown to more than $1.6 billion in annual 
sales and serves more than 1.9 million business, residential and government 
customers through its four major business units: 


MCI Telecommunications 
MCI Airsignal 
MCI International 


MCI Digital Information Services 


MCI TELECOMMUNICATIONS 


MCI Telecommunications provides domestic interstate long distance service 
throughout all 50 states, plus Puerto Rico, the U.S. Virgin Islands, and major 
calling areas of Canada. It is also authorized to provide varying degrees of 
intrastate long distance service in some states. 


MCIT also is the first long distance carrier other than AT&T to offer direct 
dial service overseas. International telephone service is available to all 
residential and commercial customers (with the exception of Private Line 
customers). In October, 1984 the first international service agreements wer 
announced with the following countries: Argentina, Belgium, Brazil, East 
Germany, Greece, United Arab Emirates, and the United Kingdom. 


Total capital investment in MCI’s long distance network is approximately $2 
billion. MCI’s network, the second largest in the U.S., employs microwave 
optical fiber, satellite and various digital transmission technologies. 


Subscribers - Domestic Long Distance (as of 10/84) 
Residential 1.4 million 
Commercial -3 million 

Total 1.7 million 
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Operations - (as of 10/84) 
Network Miles 20,543 
(microwave, optical fiber, satellite) 


Circuits 238,000 
Employees 9,500 (full-time, approx.) 


MCI AIRSIGNAL 


service will commence in New York City, Baltimore-Washington, Los Angeles, 
Chicago. MCI car telephone service is offered in 20 markets. 


Personal Message Delivery Servic 


ALPHANUMERIC MESSAGE SERVICE 


MCI Airsignal provides personal message delivery and car telephone services. 
MCI Message Service is offered in more than 50 metropolitan areas. In 1984, 


and 


Displays up to 40-character message using letters and/or numbers. Memory 
and recall ability. Alerts subscriber with a silent visual alert or a soft 


tone. 


[J 


DISPLAY MESSAGE SERVIC 


Displays up to 24-digit message (e.g., phone number, stock quotes, sales 
figures, coded messages). Memory and recall capability. Alerts customer 


to message with a silent visual alert or a soft tone. 


TONE MESSAGE SERVICE 


Notifies customer of a message with a soft tone. 


[7] 


VOICE MESSAGE SERVIC 


Receives message in actual voice of caller. 


[J 


EXPRESS MESSAGE SERVIC 


Receives and stores messages. Instantly alerts subscriber via pager when 


a message is received. 


Car 


lephone Servic 


Enables customers to place calls to or receive calls from anywhere in the 


world, 24 hours a day, as they travel in their cars. With the advent of new 
cellular technology, both the quality and the accessibility of car telephone 


service will vastly improve. 


MCI has thus far obtained franchises to operate a new kind of mobile phone 


service, cellular telephone, in Minneapolis and Pittsburgh, and has received 


favorable decisions from FCC administration law judges authorizing service 


in 


Los Angeles, Denver-Boulder, and Kansas City. MCI has applied for licenses to 


provide cellular service in 81 metropolitan areas. 


MCI Airsignal Branch Sales Offices 


Personal Message Service/Conventional Mobile Phone Servic 


Birmingham (205) 942-2924 
Sacramento (916) 444-2350 
Memphis (901) 682-9658 
Cleveland (216) 464-7311 
Dallas (214) 788-5111 
Fresno (209) 486-7410 
Las Vegas (702) 382-7461 
Denver (303) 778-7878 
Portland (503) 227-2556 
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Philadelphia (215) 677-9845 
Atlanta (404) 252-2114 
West Florida (813) 875-3404 
Minneapolis (612) 544-8175 
Kansas City (913) 648-8090 
Miami (305) 491-0122 
Pittsburgh (412) 343-1611 
Houston (713) 464-2516 
Bakersfield (805) 832-2346 
Cellular Telephone Offices 
Minneapolis-St. Paul (612) 544-3312 
Los Angeles (714) 527-0385 
Elsewhere in California (800) 344-3455 
Headquarters - Washington, D.C. (202) 429-9660 


MCI INTERNATIONAL 


MCI International provides private-line voice service to several overseas 
countries, and data and message services, including telex, cablegram, leased 
channel, and packet switching communications, to more than 200 overseas points. 
MCI has moved into two new areas of service: International direct-dial 
telephone service and international electronic mail and hard-copy delivery 
services. 


H 


nternational Record Services 


TELEX SERVICE (domestic and international) permits instantaneous, two-way, 
written communications with other subscribers worldwide. Customers can send 
messages at any time, even though the receiving terminal may be unattended. 
MCI International offers access to its telex service from a variety of 
terminals and networks; not only subscribers with telex terminals but also 
those with communicating word processors, data terminals or computers that 
communicate over telephone lines can take advantage of MCI International telex 
service. To subscribers connected to its own telex network, MCI International 
offers World Message Services--a package of communications offerings including 
telex, cablegram and MCI Mail services. Various servic nhancements are 
available to save time, improve operating efficiency and simplify records 
keeping for telex users. 


CABLEGRAM SERVICE, the traditional means of international written 
communications, offers flexibility in delivery and economical rates for shorter 
messages. Cablegrams can be delivered to virtually any overseas point. 
Subscribers with telex terminals or various other types of equipment can access 
and TELUS cablegram switch and take advantage of such servic nhancements as 
abbreviated addressing and departmental billing. 


3 


LEASED CHANNEL SERVICE provides an exclusive line between a U.S. firm and it’s 
overseas office for private communications 24 hours a day. Each MCI 
International leased channel is tailored to meet the needs of a specific 
customer for teleprinter, facsimile, voice and/or data traffic. For 
subscribers with several offices requiring private communications with each 
other, MCI International offers a versatile message-switching service. 
Voice/data leases can be configured to meet a whole array of communicating 
needs; for example, one channel might carry data traffic from a computer at 
night, voice communications during office hours, and simultaneous teleprinter 
messages at any time. Data channels can handle requirements for traffic at any 
speed from 1200 bits per second to 1.544 megabits per second. 


= 


IMPACS SERVICE uses packet-switching technology to provide international 
communications service between data terminals and computers. Impacs offers 
on-line, real-time connections and enables many types of incompatible systems 
to communicate. Impacs service offers virtually error-free transmission 
because of the error-detection and retransmission capability of the network. 
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INSTALINK SERVICE allows businesses overseas to use regular telex equipment to 
access remote computing systems and databases in the U.S. Subscribers can 
retrieve data from a computer-based information service or use a computing 
system connecting to a packet-switching network in the U.S. 


INTERNATIONAL FACSIMILE SERVICE enables subscribers to send duplicates of 
original documents overseas quickly and efficiently, even when neither th 
sender nor the receiver has facsimile transmission equipment, or when the 
sender and receiver have incompatible equipment. 


DATEL SERVICE provides automatic or voice-coordinated data transmission at 
speeds up to 2400 bits per second. Either digital or analog facsimile traffic 
can be transmitted via Datel. Datel facilities are conditioned to ensure 
high-quality transmission. The MCI International switching center allows 
communications between incompatible terminals. 


rz 


MARITIME SERVICES provide instant, high--quality contact between ships at sea 
or offshore rigs, and between these vessels and land-based subscribers 
worldwide. 


International Voice Services 


PRIVATE LINE SERVICE provides, fast, easy access to a single overseas location 
at an economical monthly rate. This technically efficient system maximizes the 
use of line capacity by recognizing idle time and assigning a speaker to a 
transmission path only when the path is needed. Users can dial a four-digit 
extension from a regular business phone to reach a key overseas location. 


International Mail Services 


WORLD MESSAGE SERVICE subscribers can access the domestic electronic mail and 
hard-copy delivery offerings of MCI Mail. In addition, MCI International is 

developing fast, low-cost services that will deliver electronic messages and 

high-quality printed documents worldwide. 


Customer Service 


THE CUSTOMER TROUBLE REPORTING ASSISTANCE CENTER at MCI International addresses 
customer concerns such as equipment maintenance and service performance 
questions. Customer service specialists, on duty 24 hours a day on business 
days, answer questions and electronically route service requests to technicians 
nationwide. 


MCI DIGITAL INFORMATION SERVICES CORP. 


MCI Digital Information Services, MCI’s newest unit, provides high-speed, 
low-cost, time-sensitive message delivery (MCI Mail), either electronically or 
via hard copy. 


MCI Mail provides time-sensitive document delivery to anyone, anywhere vial 
MCI’s long-distance telephone network. MCI Mail can reach a recipient 
instantly, in four hours or less, or overnight by noon the next day. Prices 
are as much as 90 percent lower than comparable time-sensitive mail delivery 
services. MCI Mail can be delivered electronically, terminal to terminal, or 
laser printed on letterhead stationery with the customer’s signature. 


MCI Mail customers can even order gifts and services direct through MCI Mail, 
ranging from software and paper for personal computers to investment advisory 
services to travel specials. 


There are no sign-up, monthly service charges or "connect time" charges for MCI 
Mail. MCI Mail can be used by virtually any personal computer, word processor, 
electronic typewriter, data terminal, telex, or other digital communications 
device. The service is accessed by a local telephone call or 800 number. 


MCI Mail 


INSTANT delivery to an "electronic" mailbox. 
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FOUR-HOUR paper delivery by courier to 17 major metropolitan areas regardless 
of point of origin. 


OVERNIGHT paper delivery by courier by noon the next day in 20,000 continental 
U.S. cities. 


MCI LETTER transmitted electronically to the MCI digital postal center nearest 
its destination, then delivered locally by the U.S. Postal Service. 


TELEX DISPATCH enables MCI Mail subscribers to transmit messages to the more 
than 1.6 million telex subscribers worldwide. 


VOLUME MAIL enables customers to send large mailings in a variety of letter 
formats, at substantial savings in delivery time and expens 


Look for more MCI Files coming to Metal Shop soon! 


This has been a Knight Lightning Presentation 


8.txt Wed Apr 26 09:43:37 2017 1 


==Phrack Inc.== 
Volume One, Issue Two, Phile 8 of 9 


The Hackers Guide to RSTS-I 


GI 
(ee) 
jo) 


Data Line. TWX 650-240-6356 


Rsts is one of the most versatile operating systems available for 
the PDP-11 series of computers. It can emulate both RSX and RT-11 (though not 
fully), and is often a choice where multiple concurrent operating systems must 
be online. I was a system manager on an 11-23 for about a year and learned a 
fair amount about the OS (perhaps forgetting a good deal in the interim). This 
phile applies to release 8.0 and th ntire 7 series. By the way, version 9.0 
is it - DEC is discontinuing RSTS with that release and using 9.0 as a bridge 
to VMS for the PDP-11 series. The logon will tell which version you are 
hacking. 


If the SYSTAT-before-logon has been disabled (It probably has), no big 
worry. Account 1,2 must be present on the system and contains most of the 


system utilities. On booting, the account is called at least 8 times to put 
batch processors and spoolers online. Changing [1,2]’s passwords in the 
command file is a tedious process - most system managers are too lazy, so it 


won’t change often. Oh yes, the default PW for 1,2 is SYSLIB. This knowledge 
should cut hacking time considerably for many systems. When you get in, RUN 
SMONEY. This gives all accounts, KCT’s (Billing units), accesses, time on 
system, and PASSWORDS, if you ask. Don’t reset the system when it asks, it 
merely zeroes the program and not the hardware, but could tip someone off that 
he system had been hacked. 


Personally, I like running out of a new account, so RUN SREACT. 
Pick a new account , making sure the first number (before the comma) is a "1" 
to get full privilege. Accept defaults for disk placement. As for Cluster 
size, I prefer 4. It’s large enough to get fast disk access, but small enough 
so that little space is wasted for small files. Cluster size is shown (CLU or 
CLS) on MONEY and on DIR/FULL. Follow conventions and you’1ll stand less chance 
of being noticed. 


RSTS has some of the most complete HELP files short of a CDC mainframe. 
HELP HELP will give the forst screen of the nested menus. Be sure to do this 
from a privileged account or you’ll miss about half of the best commands. HELP 
SYSTAT will give a thorough overview of the system setup & status program. 


RUN SSYSTAT (or just SYS if the Concise Command Language is set 
up normally). On the left is a report of te system users including all 
background jobs (print spoolers, batch processors and the like), their 
keyboard, and what state they are in (RN=run, *C=waiting for input, DCL=logged 
on, no program running, DR=Disk Read, DW=Disk Write). To the right is a list 
of busy I/O devices. At the end is a full report of Disk names (DR:=Hard, DU:= 
floppy), and space allocated/free. To cause some havoc pick a target KB, 
preferrably one running a financial type program. Note the Job 
leftmost column. Simply type UT KILL and he’s totally gone, without so much 
as a logoff message. If done during a Disk Write - get out the backups!! 


If just tying up resources is more your game, RUN S$VT50PY. It gives 
the utilization readout on a 20 second basis, or whenever a key is struck. The 
program itself uses a lot of CPU time, so when the Interval <20>? comes up, 
enter a 1 and watch the EXEC percent go through the roof. 


If wasting paper is more your style, find the KB: number of the printer 
(KBO: is the console) from SYSTAT when it’s in use, or try LPl:. Find a long 
text file (DIR [*,*]*.txt) and COPY LP1:=filename. Don’t forget the colon when 
referring to keyboards or printers. 


Try DTR. If DATATRIEVE is online, you can set up a database of huge 
proportions. Again, full help is available. SET GUIDE (configure your 
terminal for VT-100) and it takes you through every step. 
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Phreak World News 
Compiled by 
\\\\\=-{ Knight Lightning }-=///// 


Spitfire Hacker Leaves Phreak World 


Spitfire Hacker resigned from the phreaking world in December due to a lack of 
computer. He now is holding a job and trying to earn enough money to get 
another computer. He says that he plans to be back by November 1986. 


MCI Cracks Down 


Dr. Crash busted for MCI scanning. In the early part of December, Dr. Crash 
ran a scanner on MCI, MCI traced him and told him to stop, unfortunately Dr. 
Hack, another 314er, started scanning the same port later that night. MCI 
didn’t trace it again and assumed it was Dr. Crash back at work. All of his 
files were hidden away but MCI and authorities confiscated his Atari computer 
and his phone. MCI security told Dr. Crash that he was part of an ongoing 
investigation. Later that month he had a meeting with MCI security, where they 
questioned him about the incident. His computer, they told him, will arrive in 
the mail soon. 


Also in this issues news, Jester Sluggo said his goodbyes to St.Louis and now 
has returned to his home in Cross-Bar Territory. 


Announcing... cd > fe re 
| \/ | / / 
|_| |_letal / /hop 
ee a 

fC 
300/1200/2400 Baud/20 Megs Online 
24 hours a day/7 days a week 
Sysop: Cheap Shades 
(314) 256-7284 


If you would like to become a member of this board please contact Cheap Shades, 
Knight Lightning, or Taran King for the general password. 


Metal Shop...PRIVATE 


Metal Shop is now officially a private BBS. On Jan. 2 Taran King and Knight 
Lightning purged 241 users from the Metal Shop userlist. There are now general 
passwords and new user passwords to this system. If you would like to become a 
member of Metal Shop, please contact Taran King, Knight Lightning, or Cheap 
Shades on any bbs they are on. 


Extasyy Elite Disbanded 


The following data has not been completely researched and may be considered as 
rumors. Bit Blitz busted for phreaking, the organization and enforcement 
agencies are unknown. However, $3000 worth of computer material (7 computers) 
were confiscated. Also it is reported that The Mentor informed on him. 


The Mentor was busted for breaking into his school to steal 29 computers. Also 
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it has been said that Poltergeist is in the hospital with leukemia. 
It is unknown if any other members were busted for any other reasons. However, 
all former members are apparently safe now. 


The Bit Blitz and Crustaceo Mutoid are supposedly forming a new group called 
Rising Force and The Mentor is starting an elite hacking group. 


Much of this information has been supplied by former Extasyy member: 


Kleptic Wizard 


Legion of Doom Vs. Stronghold East Elite 


Somehow The Maelstrom found the secret LOD VMS in 305, and decided to post 
about it on Stronghold East. Knight Lightning spoke with Compu-Phreak of the 
LOD, and he said that he told Slave Driver, co-sysop of Stronghold East, to 
remove all posts concerning the LOD VMS, and the LOD itself. He also 
threatened that failure to do so would bring down the wrath of the 6 most 
active members of the LOD. 


When last looked at Stronghold East still had the information online. 


The LOD VMS has 96 megs online and store information in a way similar to 
laserdisc. 


All readers are encouraged NOT to call it as Compu-Phreak is getting pissed 
and you don’t have the passwords anyway. 


Dartmouth Abandoned 


With the destruction of the 58107s 12-27-65 password to the Dartmouth system, 
it seems to have been abandoned by phreaks. This is good because basically it 
only causes trouble. Many users get impersonated on that system and false 
rumors are constantly being started. The best way to have a conference is a 
tele-conference...start one today! 


